Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
File: s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft (raw, json)
Hash identifier: uehw8VywdfYPCdhOqpr9Xu6rCGx97/IbgDRl4zw7WHo=
Subject key identifier: 82:D1:6E:8E:05:E5:CF:35:7D:AB:20:84:2E:7C:5E:06:1D:DF:9D:7E
Authority key identifier: B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
Certificate issuer: /CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Certificate serial: 019D2772BEEBDED6498E2D1BC08C7977828D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:02:04 +0000
Manifest this update: Thu 26 Mar 2026 00:02:04 +0000
Manifest next update: Fri 27 Mar 2026 00:02:04 +0000
Files and hashes: 1: L3dsNuCYesjLEdd7H6z3I5lgNfQ.roa (hash: FRWxg7BGWCOKTf1SDbrBIvnqHEUQOUcCZw9myXVs5sQ=)
2: s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl (hash: BgZ08aj5E/TCvIyMSsPQ4w5oeyAfWo+Zax471W3qtCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:be:eb:de:d6:49:8e:2d:1b:c0:8c:79:77:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37910da1f3a43f96b58f21905eb58f643d0267e
Validity
Not Before: Mar 26 00:02:04 2026 GMT
Not After : Mar 27 00:02:04 2026 GMT
Subject: CN=82d16e8e05e5cf357dab20842e7c5e061ddf9d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:39:46:d5:50:64:40:bd:0a:a1:a8:36:f6:
13:c6:0f:21:14:59:04:08:d9:05:da:87:c8:74:f2:
bc:d7:31:1f:a3:45:aa:52:7a:2c:a5:78:93:0c:71:
5a:6b:1b:8b:b9:28:f4:75:a7:99:5d:0f:77:97:1c:
29:6a:0d:0b:c0:3f:6f:57:5e:cf:b8:55:b5:98:ba:
06:f4:5c:10:b1:0f:8a:64:a5:73:84:8d:e2:72:05:
16:e0:b2:ee:38:46:3b:90:bb:45:72:74:5a:eb:5a:
7e:e0:14:80:55:cf:ce:34:35:2d:52:6d:92:f0:0b:
ed:51:8c:04:03:0a:55:74:fd:b8:c6:44:34:1b:80:
45:43:1d:3d:af:44:56:84:81:e4:78:cf:bb:b5:0c:
98:1f:ec:02:91:f1:48:e1:df:dd:40:ac:85:51:d8:
48:a1:e5:c5:1a:e6:49:9e:c0:07:4d:50:b5:fa:71:
d3:92:28:de:1f:66:4b:86:68:2c:ae:bc:3f:7e:2b:
7c:e9:5d:3a:3a:c5:86:e5:4f:e3:3a:3c:c4:b7:9d:
97:b5:27:a4:19:d7:28:10:2d:24:9c:86:2f:36:8d:
06:a4:a9:b4:d3:3f:68:58:39:64:ea:92:e1:d0:f0:
b8:a7:48:ef:3e:3b:86:a3:38:5b:82:92:2b:bf:7a:
f0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D1:6E:8E:05:E5:CF:35:7D:AB:20:84:2E:7C:5E:06:1D:DF:9D:7E
X509v3 Authority Key Identifier:
keyid:B3:79:10:DA:1F:3A:43:F9:6B:58:F2:19:05:EB:58:F6:43:D0:26:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3kQ2h86Q_lrWPIZBetY9kPQJn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5fc80e-a095-4c20-90e4-2c0f98a74966/1/s3kQ2h86Q_lrWPIZBetY9kPQJn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6c:eb:5d:f7:10:64:e2:54:da:f5:d4:fe:32:dc:5e:4c:3c:
7f:bf:da:e8:10:d0:b2:c4:d8:fc:8c:30:13:cc:82:6e:09:5e:
0c:10:1e:f4:a8:83:a6:a8:d9:0a:85:6f:8f:3f:28:d4:b0:09:
c8:31:64:b3:bf:8e:04:39:2f:ff:49:2c:93:ea:af:29:71:7d:
96:3f:41:5d:48:49:cc:35:5f:bd:6b:18:3b:60:a8:f5:51:37:
ed:ca:63:8d:12:f8:4f:35:95:66:40:25:eb:c5:6b:94:70:93:
bc:0e:a0:b1:09:08:01:97:2f:57:8a:fa:2d:4c:d5:3d:76:92:
7f:ad:61:45:ef:90:0f:47:7c:d6:ff:ef:00:73:50:07:dc:4c:
5f:23:70:91:5d:88:1f:99:c7:0e:b4:40:81:ee:55:31:c7:a8:
be:69:90:85:9d:fe:1c:e1:67:a6:ce:40:a5:b6:71:7d:6f:bd:
b9:e4:b5:47:1f:a1:ac:cd:b6:d6:04:39:f0:5f:6b:64:d2:21:
ec:63:af:bd:f7:fa:3d:d1:97:b7:63:40:a4:c0:b0:d7:9f:26:
1b:ca:8d:bd:19:53:a9:e5:2b:00:e9:51:ff:cb:e9:ec:c2:c5:
e2:20:d0:b0:80:f4:d0:77:cd:ed:ec:6f:33:04:eb:c1:fe:df:
c6:42:0d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:53 2026 by rpki-client